Granted Patent B2

US 12,288,213 · App. 17/696,676 · Granted Apr 29, 2025

Inventors: Saurabh Banga (Pune, IN); Lalit Manchanda (Haryana, IN)

Assignee: Mastercard International Incorporated

G06Q20/401G06Q20/3276H04W12/03H04W12/66

Abstract

Claims (75)

1. A method for implementing an electronic payment transaction between a mobile communication device configured for implementing a defined communication protocol and a merchant device configured to implement the wireless communication protocol, whereby a trust token server ascertains the reliability of the merchant device prior to transmission of payment information from the mobile communication device, the method being implemented by a processor of the trust token server, comprising:

receiving from the merchant device a request for a trust token, wherein the request is originated by the mobile communication device through a contactless communication channel for the electronic payment transaction between the merchant device and the mobile communication device;

determining whether the merchant device is trustworthy, wherein said determination is based on merchant device data associated with the merchant device;

responsive to a determination that the merchant device is trustworthy, generating a first displayable trust token, wherein the first displayable trust token comprises a token that is encrypted using one or more encryption algorithms or encryption keys, wherein the one or more decryption algorithms or decryption keys corresponding to the first displayable trust token are accessible exclusively to the trust token server;

storing a copy of the first displayable trust token in a database coupled with the trust token server;

transmitting the first displayable trust token to the merchant device through a first network communication channel that is different from the contactless communication channel;

receiving a second displayable trust token from the mobile communication device, wherein the second displayable trust token has been imaged by the mobile communication device from a display coupled with the merchant device;

decrypting the copy of the first displayable trust token and the second displayable trust token using the one or more encryption algorithms or encryption keys to extract information associated with each displayable trust token;

comparing information extracted from the second displayable trust token against information extracted from the copy of the first displayable trust token;

generating a merchant device validation decision message based on the comparison, wherein:

the merchant device validation decision message comprises an indication that the merchant device has been validated as being trustworthy, in response to the comparison resulting in a match decision; and

the merchant device validation decision message comprises an indication that the merchant device has not been validated as being trustworthy, in response to the comparison resulting in a non-match decision; and

transmitting the merchant validation decision message to the mobile communication device through a second network communication channel that is different from the first network communication channel, wherein the trust token server is different from the merchant device and the mobile communication device.

2. The method as claimed in claim 1 wherein the defined communication protocol is a near-field-communication (NFC) protocol.

3. The method as claimed in claim 1 , wherein:

responsive to the merchant device validation decision message comprising an indication that the merchant device has been validated, the mobile communication device proceeds to implement a payment transaction through contactless communication between the mobile communication device and the merchant device; and

responsive to the merchant device validation decision message comprising an indication that the merchant device has not been validated, the mobile communication device terminates the contactless communication session between the mobile communication device and the merchant device prior to:

implementing the payment transaction, or

transmitting payor account information to the merchant device.

4. The method of claim 1 , wherein the first displayable trust token is generated and encrypted to include a set of data parameters associated uniquely with the first displayable trust token.

5. The method of claim 1 , wherein:

the first displayable trust token is associated with a defined time-to-live duration; and

generation of the merchant device validation message is based on determining whether the second displayable trust token is received from the mobile communication device within a time-to-live duration that is associated with the first displayable trust token.

6. A system for implementing an electronic payment transaction between a mobile communication device configured for implementing a defined communication protocol and a merchant device configured to implement the wireless communication protocol, whereby a trust token server ascertains the reliability of the merchant device prior to transmission of payment information from the mobile communication device, wherein the system comprises:

the trust token server comprising a processor and a memory, wherein the processor is configured to:

receive from the merchant device, a request for a trust token, wherein the request is originated by the mobile communication device through a contactless communication channel for the electronic payment transaction between the merchant device and the mobile communication device;

determine whether the merchant device is trustworthy, wherein said determination is based on merchant device data associated with the merchant device;

responsive to a determination that the merchant device is trustworthy, generate a first displayable trust token,

wherein the first displayable trust token comprises a token that is encrypted using one or more encryption algorithms or encryption keys, wherein decryption algorithms or decryption keys corresponding to the first displayable trust token are accessible exclusively to the trust token server;

store a copy of the first displayable trust token in a database coupled with the trust token server;

transmit the first displayable trust token to the merchant device through a first network communication channel that is different from the contactless communication channel;

receive a second displayable trust token from the mobile communication device, wherein the second displayable trust token has been imaged by the mobile communication device from a display coupled with the merchant device;

decrypt the copy of the first displayable trust token and the second displayable trust token using the one or more encryption algorithms or encryption keys to extract information associated with each displayable trust token;

compare information extracted from the second displayable trust token against information extracted from the copy of the first displayable trust token;

generate a merchant device validation decision message based on the comparison, wherein:

the merchant device validation decision message comprises an indication that the merchant device has been validated as being trustworthy, in response to the comparison resulting in a match decision; and

the merchant device validation decision message comprises an indication that the merchant device has not been validated as being trustworthy, in response to the comparison resulting in a non-match decision; and

transmit the merchant validation decision message to the mobile communication device through a second network communication channel that is different from the first network communication channel, wherein the trust token server is different from the merchant device and the mobile communication device.

7. The system as claimed in claim 6 wherein the defined communication protocol is a near-field-communication (NFC) protocol.

8. The system as claimed in claim 6 , wherein:

responsive to the merchant device validation decision message comprising information representing the merchant device as being validated, the mobile communication device proceeds to implement a payment transaction through contactless communication between the mobile communication device and the merchant device; and

responsive to the merchant device validation decision message comprising information representing the merchant device as not being validated, the mobile communication device terminates the contactless communication session between the mobile communication device and the merchant device, prior to:

implementing the payment transaction, or

transmitting payor account information to the merchant device.

9. The system as claimed in claim 6 , wherein the merchant device data includes any one or more of state data, historical data, parameter data, operating system data, device data, application integrity data, and operating system reliability state data corresponding to the merchant device.

10. The system as claimed in claim 6 , wherein one or both of the first displayable trust token and the second displayable trust token comprise any of an optically displayable token, an optically imageable token, a pictogram, icon, image, bar code, optical code, data matrix code, or a quick-response (QR) code.

11. The system as claimed in claim 6 , wherein the first displayable trust token is generated and encrypted to include a set of data parameters associated uniquely with the first displayable trust token.

12. The system as claimed in claim 6 , wherein:

the first displayable trust token is associated with a defined time-to-live duration; and

generation of the merchant device validation message is based on determining whether the second displayable trust token is received from the mobile communication device within a time-to-live duration that is associated with the first displayable trust token.

13. A non-transitory computer readable medium for implementing an electronic payment transaction between a mobile communication device configured for implementing a defined communication protocol and a merchant device configured to implement the wireless communication protocol, whereby a trust token server ascertains the reliability of the merchant device prior to transmission of payment information from the mobile communication device, the non-transitory computer readable medium having a computer readable program code embodied therein, the computer readable program code comprising instructions for:

receiving from the merchant device a request for a trust token, wherein the request is originated by the mobile communication device through a contactless communication channel for the electronic payment transaction between the merchant device and the mobile communication device;

determining whether the merchant device is trustworthy, wherein said determination is based on merchant device data associated with the merchant device;

responsive to a determination that the merchant device is trustworthy, generating a first displayable trust token,

wherein the first displayable trust token comprises a token that is encrypted using one or more encryption algorithms or encryption keys, wherein decryption algorithms or decryption keys corresponding to the first displayable trust token are accessible exclusively to the trust token server;

storing a copy of the first displayable trust token in a database coupled with the trust token server;

transmitting the first displayable trust token to the merchant device through a first network communication channel that is different from the contactless communication channel;

receiving a second displayable trust token from the mobile communication device, wherein the second displayable trust token has been imaged by the mobile communication device from a display coupled with the merchant device;

decrypting the copy of the first displayable trust token and the second displayable trust token using the one or more encryption algorithms or encryption keys to extract information associated with each displayable trust token;

comparing information extracted from the second displayable trust token against information extracted from the copy of the first displayable trust token;

generating a merchant device validation decision message based on the comparison, wherein:

the merchant device validation decision message comprises an indication that the merchant device has been validated as being trustworthy, in response to the comparison resulting in a match decision; and

the merchant device validation decision message comprises an indication that the merchant device has not been validated as being trustworthy, in response to the comparison resulting in a non-match decision; and

transmitting the merchant validation decision message to the mobile communication device through a second network communication channel that is different from the first network communication channel, wherein the trust token server is different from the merchant device and the mobile communication device.

14. The non-transitory computer readable medium of claim 13 , wherein the defined communication protocol is a near-field-communication (NFC) protocol.

15. The non-transitory computer readable medium of claim 13 , wherein:

responsive to the merchant device validation decision message comprising an indication that the merchant device has been validated, the mobile communication device proceeds to implement a payment transaction through contactless communication between the mobile communication device and the merchant device; and

responsive to the merchant device validation decision message comprising an indication that the merchant device has not been validated, the mobile communication device terminates the contactless communication session between the mobile communication device and the merchant device prior to:

implementing the payment transaction, or

transmitting payor account information to the merchant device.

16. The non-transitory computer readable medium of claim 13 , wherein:

the first displayable trust token is associated with a defined time-to-live duration; and

generation of the merchant device validation message is based on determining whether the second displayable trust token is received from the mobile communication device within a time-to-live duration that is associated with the first displayable trust token.

17. The method of claim 1 , wherein the merchant device data includes any one or more of state data, historical data, parameter data, operating system data, device data, application integrity data, and operating system reliability state data corresponding to the merchant device.

18. The method of claim 1 , wherein one or both of the first displayable trust token and the second displayable trust token comprise any of an optically displayable token, an optically imageable token, a pictogram, icon, image, bar code, optical code, data matrix code, or a quick-response (QR) code.

Assignments (1)

Continuity (1)

References Cited (166)